This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131352e3132342e31362e302f32302d3234203d3e203337393633.roa
File: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (raw, json)
Hash identifier: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=
Subject key identifier: 8C:A8:64:DC:4B:08:AF:9F:05:93:11:18:FD:B8:D8:DE:62:32:D4:79
Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial: 5977F51F1AC503244A5946C2A0302056B657C0FB
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131352e3132342e31362e302f32302d3234203d3e203337393633.roa
Signing time: Tue 20 Jan 2026 02:09:31 +0000
ROA not before: Tue 20 Jan 2026 02:04:31 +0000
ROA not after: Tue 19 Jan 2027 02:09:31 +0000
asID: 37963
IP address blocks: 115.124.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:77:f5:1f:1a:c5:03:24:4a:59:46:c2:a0:30:20:56:b6:57:c0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Validity
Not Before: Jan 20 02:04:31 2026 GMT
Not After : Jan 19 02:09:31 2027 GMT
Subject: CN=8CA864DC4B08AF9F05931118FDB8D8DE6232D479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:cf:04:e9:fa:3c:53:b6:91:c4:88:0e:36:
cf:3f:45:80:98:7b:96:c7:3f:d5:8a:c9:6e:ad:1e:
43:b9:6f:7b:17:65:f8:45:64:fc:47:1e:f1:e0:2d:
a6:41:d3:13:56:5b:b9:db:80:0c:ea:1f:8a:63:25:
6c:05:18:a6:26:b7:27:c5:b8:5e:29:df:6d:35:af:
12:82:95:38:3c:d5:8c:8d:6f:5a:c1:3d:c4:64:69:
d4:ad:79:2c:3d:54:dc:5a:f7:de:80:bf:66:ed:66:
47:6e:45:79:52:6e:4d:69:86:e1:95:3b:70:d5:2f:
2a:f6:54:2d:14:2a:d8:21:69:93:47:dc:d1:c4:c0:
31:46:f7:5c:4f:fb:b5:8d:48:7f:9e:99:29:05:a7:
c6:ad:bc:d1:f3:0e:89:f5:bb:e2:08:0c:03:87:18:
85:c3:8b:db:9f:b6:d3:78:b0:70:cc:2d:9e:a5:3b:
7a:83:34:f1:42:2f:16:dc:2e:08:e6:98:54:33:97:
4d:a9:92:1c:6e:92:a3:00:e0:22:60:93:f0:73:1c:
bc:66:a8:e4:27:7e:11:73:4b:d2:5d:35:dd:4a:dc:
b1:dc:24:ff:5d:f2:9e:6b:e7:cc:52:f8:73:7f:3a:
73:1a:9a:66:42:16:44:50:07:62:73:5c:17:0b:6b:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:64:DC:4B:08:AF:9F:05:93:11:18:FD:B8:D8:DE:62:32:D4:79
X509v3 Authority Key Identifier:
keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131352e3132342e31362e302f32302d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.124.16.0/20
Signature Algorithm: sha256WithRSAEncryption
af:64:4f:c2:92:01:ea:8f:a7:97:ac:da:dd:47:ee:72:20:1b:
15:40:bb:a9:61:14:bd:af:ff:da:95:c0:1d:47:2f:18:0f:58:
87:e6:8f:8f:0d:d4:c7:5a:b2:c1:ae:a6:4b:e5:32:25:bf:a2:
2c:8c:2d:4e:96:95:b5:ad:0a:e9:67:cb:f7:14:6b:50:08:7b:
af:63:2d:f1:2f:32:98:2a:c4:ec:21:60:22:f2:64:ad:4e:95:
b0:9a:f1:19:8f:45:f0:ca:6b:e9:45:4c:dd:06:ef:68:dc:6c:
d9:e1:b8:b1:7c:5b:5b:36:e7:df:71:82:a8:11:dd:32:9f:b2:
0f:00:74:ef:3f:90:df:b0:5f:3b:ed:09:bb:5b:0f:3a:9a:c2:
d6:13:b1:ad:da:5f:ac:e4:bb:5f:51:11:f2:39:85:61:74:d3:
7e:c4:c1:d9:3a:95:96:5d:c2:b0:9e:ac:7d:da:9a:2b:c2:a1:
b2:96:c7:b4:50:d5:15:73:02:1f:27:8c:ab:9f:1a:7f:54:7d:
6f:03:21:e7:cc:91:34:36:0a:af:fb:43:0e:72:4a:57:85:00:
77:8b:49:1f:40:59:af:b6:51:6b:14:cc:7e:81:85:1e:a8:85:
13:e1:2a:ce:81:4a:e9:29:22:47:ff:49:24:3a:c0:9d:9e:0b:
7b:40:4e:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:49 2026 by rpki-client